Siemens AN25 manual Introduction, Verifying the OpenSSL Version, Upgrading OpenSSL

RUGGEDCOM APE	Chapter 1
Application Note	Introduction

Introduction

As of 1 February 2014, Siemens has been shipping some Linux® variants of RUGGEDCOM APE line modules (order codes APE1402-XX, APE1402-C01, APE1404-XX, and APE1404-C01, or MFLBs 6GK6015-0AL20-0GB0, 6GK6015-0AL20-0GB1, 6GK6015-0AL20-0GD0, and 6GK6015-0AL20-0GD1) with a version of the OpenSSL cryptographic software library that is vulnerable to the Heartbleed [http://www.heartbleed.com] security vulnerability.

In response to the severity of the Heartbleed vulnerability, Siemens strongly recommends that customers of RUGGEDCOM APE line modules follow the procedures described in this application note to upgrade the OpenSSL package, if necessary, regardless of the manufacturing date of their hardware.

The following sections describe in further detail how to upgrade OpenSSL on a RUGGEDCOM APE line module:

•Chapter 2, Verifying the OpenSSL Version

•Chapter 3, Upgrading OpenSSL

1